This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json) Hash identifier: YINoDHRmRyl44pz+NMALfCBKsrNdADdyF0+s3Vmg4Eg= Subject key identifier: A6:D6:7B:64:E4:68:8C:8E:1B:E2:3F:95:C7:C7:C6:E4:14:10:14:20 Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Certificate serial: 019B104A639CDD2B0FF8AF5EC44EFF4C713D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft Manifest number: 1776 Signing time: Fri 12 Dec 2025 02:01:09 +0000 Manifest this update: Fri 12 Dec 2025 02:01:09 +0000 Manifest next update: Sat 13 Dec 2025 02:01:09 +0000 Files and hashes: 1: 5iOaoXB5nkYwr8tIgFWyVnXEhjk.roa (hash: 75KyluwEydMP2XQT86kr0piX0sxxFkty1yXB3kElNns=) 2: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: mclyaoNkrQtYGQlziyxaF5ToNuSZXiOFiPnA0PNf+uI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:63:9c:dd:2b:0f:f8:af:5e:c4:4e:ff:4c:71:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Validity Not Before: Dec 12 02:01:09 2025 GMT Not After : Dec 13 02:01:09 2025 GMT Subject: CN=a6d67b64e4688c8e1be23f95c7c7c6e414101420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7a:4d:f0:d1:89:8d:de:fc:30:07:7f:55:50: c5:93:c6:b8:9b:63:37:9f:23:0e:9d:24:e9:d6:ad: 67:6e:c5:ed:c0:c2:da:80:85:0b:bc:f6:cb:f6:9a: 79:70:75:4f:2b:c2:3f:de:1d:77:89:4c:ae:d5:c9: 04:ac:fa:2c:0b:0e:88:09:72:2b:17:7c:7b:c7:a9: 33:60:df:9b:aa:94:29:83:aa:a7:2d:ce:34:9a:02: cd:c2:e5:ce:d6:7a:1e:f2:fe:9c:43:d2:58:cd:79: 63:70:26:e3:b7:09:00:68:46:0d:7b:13:fc:83:4c: 2c:20:90:c2:3a:2e:85:70:6e:84:03:8a:83:b7:b3: 8f:4f:c8:5a:0a:b3:d5:4f:91:1e:89:94:3f:c2:2e: 9d:e9:66:a6:cd:87:8f:c9:6e:65:e4:1c:57:5d:a0: b1:d6:c3:45:bf:77:50:48:2d:c3:77:b5:99:43:f0: 84:15:12:74:97:68:ce:46:f8:47:96:24:59:c9:25: 3b:cb:c3:d4:f3:7f:e2:5c:88:3b:0f:69:5f:6e:b8: c0:68:8d:d3:29:59:ce:93:c9:27:1d:38:fb:9a:da: 61:a4:69:a8:9e:8e:ad:62:99:f9:2e:7b:92:84:0e: 7d:a0:6b:28:68:2a:74:1a:a1:70:f7:e5:6a:11:e1: 7d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D6:7B:64:E4:68:8C:8E:1B:E2:3F:95:C7:C7:C6:E4:14:10:14:20 X509v3 Authority Key Identifier: keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1f:d2:ef:c6:a9:6f:0e:c5:80:9f:70:76:aa:60:38:d7:a7: 81:8b:eb:8e:5c:54:9e:09:47:4d:7a:fa:d7:0d:c2:ea:b9:1e: 7d:a1:0c:d1:32:2f:aa:be:bb:13:34:ac:21:cd:84:a1:4e:2b: 94:c5:0e:22:db:48:db:97:60:18:61:82:f8:3b:09:b5:d2:6a: 2a:e8:19:fb:68:f3:bb:c7:9f:dd:d2:9b:ad:23:2c:23:e1:21: 76:89:75:48:0b:5d:06:60:c7:c1:a9:0a:ef:a7:b9:f1:f6:38: 9a:cf:f0:d7:01:04:aa:8e:21:52:a3:aa:5b:98:f6:74:48:2f: b6:a7:9f:9e:71:06:49:9c:e8:e0:a3:44:0a:09:68:da:98:23: 5b:bc:a2:ed:52:06:be:c1:1f:78:96:b1:da:9c:b6:63:89:a8: eb:27:fa:6e:ca:de:bd:4c:af:64:34:92:8e:f2:4b:a4:d6:04: 0c:9f:42:bb:24:0e:fd:46:93:96:67:bb:7e:65:15:34:b8:24: 84:03:01:1d:e6:ad:f0:20:81:3e:9a:2e:1b:02:bd:1e:57:eb: fc:7d:41:13:99:14:19:8c:e5:e2:89:a1:3e:ed:8c:68:ca:b6: 49:b7:d5:3c:cb:d2:26:b2:15:cc:f9:1f:ce:ed:e7:35:41:a0: fd:d5:c4:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSmOc3SsP+K9exE7/THE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl NGRkNmMwHhcNMjUxMjEyMDIwMTA5WhcNMjUxMjEzMDIwMTA5WjAzMTEwLwYDVQQD EyhhNmQ2N2I2NGU0Njg4YzhlMWJlMjNmOTVjN2M3YzZlNDE0MTAxNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3pN8NGJjd78MAd/VVDFk8a4m2M3 nyMOnSTp1q1nbsXtwMLagIULvPbL9pp5cHVPK8I/3h13iUyu1ckErPosCw6ICXIr F3x7x6kzYN+bqpQpg6qnLc40mgLNwuXO1noe8v6cQ9JYzXljcCbjtwkAaEYNexP8 g0wsIJDCOi6FcG6EA4qDt7OPT8haCrPVT5EeiZQ/wi6d6WamzYePyW5l5BxXXaCx 1sNFv3dQSC3Dd7WZQ/CEFRJ0l2jORvhHliRZySU7y8PU83/iXIg7D2lfbrjAaI3T KVnOk8knHTj7mtphpGmono6tYpn5LnuShA59oGsoaCp0GqFw9+VqEeF9SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbWe2TkaIyOG+I/lcfHxuQUEBQgMB8GA1UdIwQY MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt MDc2Yzg4Yjg4MDJmLzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEB/S78ap bw7FgJ9wdqpgONengYvrjlxUnglHTXr61w3C6rkefaEM0TIvqr67EzSsIc2EoU4r lMUOIttI25dgGGGC+DsJtdJqKugZ+2jzu8ef3dKbrSMsI+Ehdol1SAtdBmDHwakK 76e58fY4ms/w1wEEqo4hUqOqW5j2dEgvtqefnnEGSZzo4KNECglo2pgjW7yi7VIG vsEfeJax2py2Y4mo6yf6bsrevUyvZDSSjvJLpNYEDJ9CuyQO/UaTlme7fmUVNLgk hAMBHeat8CCBPpouGwK9Hlfr/H1BE5kUGYzl4omhPu2MaMq2SbfVPMvSJrIVzPkf zu3nNUGg/dXE/A== -----END CERTIFICATE-----Generated at Fri Dec 12 08:46:26 2025 by rpki-client